Mirror: @moonshot-ai/kimi-code@0.17.0 (npm @botiverse/kimi-code-sdk@0.17.0)

Upstream tag: @moonshot-ai/kimi-code@0.17.0

node-sdk public interface: ADDITIVE. node-sdk package.json bumped 0.9.3 → 0.9.4 (first internal version change since 0.9.3). New public exports from src/index.ts:

• loadRuntimeConfigSafe — host-side safe config reader (returns parsed KimiConfig + diagnostics, doesn't throw on bad config).
• resolveConfigPath — sync helper for the canonical <kimiHome>/config.toml path.

Major upstream feature: server-hosted web UI (#625):

• New CLI commands kimi server (start/stop/manage local server) + kimi web (open server-hosted web UI).
• Server REST + WebSocket APIs for the web client (packages/protocol events.ts +725 / ws-control.ts +386 / new REST surfaces snapshot/terminal/skill/modelCatalog/config/connection).

Slock consumer: drop-in bump from 0.16.0 — public SDK API stays compatible (additive only). The new server/web feature surface is not on the Slock kimi-sdk runtime path (we drive KimiHarness / Session directly; agent face is Slock, not the bundled web). loadRuntimeConfigSafe could simplify our daemon's detectKimiSdkModels regex scan as an optional follow-up. Published to npm as @botiverse/kimi-code-sdk@0.17.0 via OIDC trusted-publishing.